Senior Officer Incident Handling & Forensics job at Uganda Communications Commission (UCC)
About the Organization
The Uganda Communications Commission is the government regulatory body of the communications sector in Uganda. Although owned by the Ugandan government, it acts independently.
Job Description
The Uganda Communications Commission (UCC) is a statutory body established under the Communications Act 2013 to regulate the Telecommunications, Data communications, Broadcasting, Postal and Radio communications and Infrastructure. To achieve this mandate, UCC seeks to recruit individuals with proven skills and competencies to fill the vacant positions below to assist the Commission implement its mandate.
Job Purpose:
To ensure prompt and effective Incident response and forensic analysis, to safeguard and Improve the resilience of the communication sector Infrastructure and services against cyber threats.
%20(1).png)
Duties and Responsibilities
Support the implementation of the corporate cybersecurity framework and Information Technology Policy, as well as contribute to the implementation of incident response plans, policies, and procedures in coordination with relevant stakeholders.
Participate in conducting digital forensics investigations to determine the cause, extent, and impact of security incidents, while also participating in the preparation of incident reports documenting the incident timeline, investigation steps, and outcomes.
Monitor cyber threat intelligence platforms to detect cybersecurity events that occur or might occur within the CERT constituent networks, and actively participate in incident documentation and reporting.
Maintain accurate records of incidents, actions taken, and lessons learned to improve future incident handling processes, and contribute to the development of knowledge and skills on CERT for cross-departmental learning.
Maintain flexibility to accommodate any other duties assigned by the line supervisor from time to time.
%20(1).png)
Qualification, Experiences and Competencies
Key Performance Indicators
Conducted digital forensics investigations.
Detected cyber security events and their relevance.
Timeliness and accuracy in documenting security incidents.
Quality and completeness of incident reports.
Training and knowledge-sharing sessions participated in.
Number of incident reports prepared.
Education and Professional Qualifications
Bachelor's degree in computer science, information technology, information security, or a related field.
Working Experience
Minimum of two (2) years of working experience in information security or a relevant field in a similar corporate setting.
Skills, Knowledge and Abilities
Technical
Report writing skills.
Knowledge of industry-standard incident response frameworks, such as NIST Incident Response Guide, SANS Incident Handling Steps, or similar methodologies, to guide and streamline incident response processes.
Proficiency in using incident response tools and utilities, such as packet capture tools, forensic analysis software, memory analysis tools, malware analysis and threat intelligence platforms.
Experience with IDS/IPS solutions to monitor network traffic, detect suspicious activities, and prevent unauthorized access or exploitation of vulnerabilities.
Knowledge of digital forensics principles, tools and techniques to conduct thorough investigations, analyze digital evidence and determine the root cause of security incidents.
Behavioural
Effective communication and organizational skills.
Excellent analytical and problem-solving skills.
How to Apply
Interested persons can submit their applications using the link https://erp.ucc.co.ug/jobs to complete the online application form and upload their CV, Application letter and relevant certificates. The CV must include 3 referees including their email address and telephone number. The deadline for submitting applications is 22nd July 2024 at 5:00pm. UCC is an equal opportunity employer. Any form of canvassing will lead to automatic disqualification. Applications received after the closing date will not be considered. Only shortlisted candidates will be contacted.
Related Job Postings
%20(1).png)